IDS 4210 Logon error

perfectlemur · ‎07-05-2005

Hi,

I work for a company and we have an IDS model 4210, it's been sitting unused for a couple of years and now we're trying to set it up again. Unfortunately the employee that supported it before no longer works here. We have the password for the cisco account, when we login with it the export notice is displayed then it waits for a minute then displays this

"Err" and takes me back to the login prompt. I'm using the com1 port to connect using hyper terminal.

Does anyone have any suggestions?

Thanks in advance!

Ben

thomas.chen · ‎07-11-2005

What is the error message you are getting, that will give us a better idea.

rwassom · ‎07-12-2005

Do you know what version of software is running on this sensor? It sounds like the application cannot launch the CLI.

Given the length of time this sensor was out of service, and the lack of information regarding how it was configured previously, you're best bet is probably to re-image the sensor to the latest supported version. You will want to install the latest signatures anyway in order to protect your network against the latest threats. Depending on what version you decide to load, you will probably need to install the 256MB memory upgrade (IDS-4210-MEM-U=). I believe it is required for 4.1 or later releases. Earlier 4.x releases may run without it, but performance could be impacted.

marcabal · ‎07-12-2005

I would suggest re-imaging the sensor.

More than likely some file has been corrupted on the sensor and it is best to start from scratch.

Plug in a keyboard and monitor.

Power the sensor on and off.

If the sensor is loaded with version 4.x, then during bootup you will see a GRUB menu which will give you an option of booting the Application Partition (the default) or the Recovery Partition.

Select the Recovery Partition, and the sensor will boot to the recovery partition and automatically reload a fresh image on the Application Partition.

Once the sensor re-image is completed you can login with the cisco user id and password and run setup.

Refer to the 4.1 documentation for more information on setting up the sensor:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids10/index.htm

If you do not see a GRUB menu during bootup then the sensor is running an older version 3.x version.

In this case it is best to get the sensor covered by a Service Contract and then order the Upgrade CDs ($0 cost when the sensor is under a service contract).

You will want to order the IPS Upgrade CD that shoudl come with the latest 5.0(2) CD. Once installed you can jump to loading file #3 below.

The following updates would then need to be installed to get the sensor up to date:

1) IDS-K9-min-4.1-1-S47.rpm.pkg

(Only needed if the sensor is at 4.0 and not 4.1)

http://www.cisco.com/cgi-bin/tablebuild.pl/ids4

2) IPS-K9-maj-5.0-1-S149.rpm.pkg

http://www.cisco.com/cgi-bin/tablebuild.pl/ips5

3) IPS-K9-sp-5.0-3.pkg

http://www.cisco.com/cgi-bin/tablebuild.pl/ips5

4) IPS-sig-S180-minreq-5.0-1.pkg

http://www.cisco.com/cgi-bin/tablebuild.pl/ips5-sigup

Fore more information about 5.0 refer to the 5.0 documentation: